Re: Connectify

[Greg Williams <gwillia5 () UCCS EDU>]

Here they are

 

HKEY_LOCAL_MACHINE\SOFTWARE\Connectify 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\Connectifyd_RASAPI32

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\Connectifyd_RASMANCS

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Conne
ctify

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E972-E325-11CE-BF
C1-08002BE10318}\0012 (this one might not be the same on all computers)

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E972-E325-11CE-BF
C1-08002BE10318}\0013 (this one might not be the same on all computers)

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E972-E325-11CE-BF
C1-08002BE10318}\0014  (this one might not be the same on all computers)

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E972-E325-11CE-BF
C1-08002BE10318}\0015  (this one might not be the same on all computers)

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E972-E325-11CE-BF
C1-08002BE10318}\0016  (this one might not be the same on all computers)

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Network\{4d36e974-e325-11ce-
bfc1-08002be10318}\{FC6D10F5-4263-4F96-892A-563143ADF07C}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\NT_CONNCTFYMP

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\connctfy

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\connctfyMP

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Connectify

 

There are more, but I think this is a good subset.  FYI if you uninstall
Connectify, it will leave all registry keys and drivers.  I told them about
this when it was in beta 18 months ago, but they didn't listen apparently.

 

 

From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Jeff Kell
Sent: Friday, March 11, 2011 2:01 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Connectify

 

On 3/11/2011 2:30 PM, HOGGATT, ANDY F. wrote: 

We do not currently maintain a NAC.  This is something that has been
considered a few times, but we have yet to move to one.  Thanks!


Speaking of "NAC enforcement", does anyone have an obvious registry entry or
executable file tied to this application to check for?

Jeff